RSS

Tag Archives: Federal Bureau of Investigation

“FBI HEADQUARTERS”

RECOVERY SCAM / FBI IMPOSTER

This scammer has sent numerous emails over the past eight months under multiple names, email and IP addresses. It seems this fraudster is getting much more frustrated and is now threatening legal action. If you google the email address the scammer is using he is supposely also Ed A McMahon of AFSOA - All LIES!

Subject: FBI HEADQUARTERS IN WASHINGTON, D.C.
From: FBI U.S.A eamcmahon@earthlink.net

This message contains blocked images.

ANTI-TERRORIST AND MONITORY CRIMES DIVISION
FBI HEADQUARTERS IN WASHINGTON, D.C.
FEDERAL BUREAU OF INVESTIGATION
FBI WEB SITE http://www.fbi.gov/J. EDGAR HOOVER BUILDING
935 PENNSYLVANIA AVENUE, NW WASHINGTON, D.C. 20535-0001

FUND BENEFICIARY, Doreen Ali,

We received your email, this is not a child play, we are ready to take you to any length if you failed to proof the legitimate of the fund you are about to receive. As a Federal Commission we are here to protect your interest and the interest of all the United State citizens as well as this great Nation. You have been investigated as the beneficiary of the said funds that is why you are in touch with the FBI for a solid proof before the funds will be release to you. The said funds is now in U.S Bank in your name which has been placed on hold under the custody of the FBI for further verification and proof before releasing the fund to you. You do not have this document in your files; if you did the fund would not have been hold. We did not believe this at first, but when we saw the transfer we had no option than to contact you.

We have gone through your Identification record and also the information received from you, we have verified a lot of things about you. It has come to the attention of our Money trafficking investigation department, that you have some funds valued at U.S $1.5Million to your name, the said payment is awaiting adjudication and crediting to Edward Powell. With full concern of The F.B.I and the Internal Revenue Service (IRS) wish to remind you of the consequences of remitting such huge sums of money without complying fully with the provisions of the Financial and Allied Matters Decree 5 as amended in sub-section C (6) of 2003, which stipulates that any monitory transaction been done in the United States Of America, must have proper records, which duly guarantees and covers the transaction as legitimate and legally acquired and not criminally or terrorist associated funds. This is due to ongoing terrorist activities/economic crimes on and against the United States of America citizens.

Note that with the information’s we have here, the fund in your name here was release from Federal Republic of Benin. To this regard you are to contact the EFCC BENIN where the fund was release from so that they will issue you the required document because they are the only people that can issue you the document. Nobody else have the right or privilege to issue you this document unless the EFCC BENIN.
You are under an observational /Investigation in connection with money laundering. If your funds comes from a legitimate and legal source, the proper guidelines for you to recover the right of transaction is for you to provide the official monitory transaction release document so that your funds will be legally processed and recorded and accounted for and then finally released to you.

FEDERAL BUREAU OF INVESTIGATION (ANTI-TERRORIST AND MONEY LAUNDERING DEPARTMENT) IS HERE to wipe out terrorism, and will stop at no length in doing our duty for the American people.

You have 48 hours to produce legal proof of the below frozen wired transaction number Edward Powell AZQV9007 owned by Edward Powell do not have any rights to receive these funds if the documented legal wire information is not complete. For your own good and benefit, you are advice not to send your money to anybody accept the below person that will get the document for you. It have come to our notice that you have been dealing with scammers regarding the present transaction in your name, with the power imposed on us as a high Federal Commission, you are hereby warn and instruction to terminate your involvement with any people or individual contacting you regarding this present transaction. The said funds is now in our custody in your name as the beneficiary, your dealings should be channel to this office alone, if we find out you are still communicating with Imposters you will be charge for advance fraud communication by the Federal Law.

The very heart of FBI operations lies in our investigations–which serve, as our mission states, ‘to protect and defend the United States against terrorist and foreign intelligence threats and to enforce the criminal laws of the United States.’ So follow our instructions properly to avoid any action before you. Attached a copy of my Office ID for your mutual view and understanding so that you will know exactly whom you are dealing with.

We currently have jurisdiction over violations of more than 200 categories of federal law. So you can see that we can track you down through Investigative programs. We have your address and the evidence and status of your wired funds, so we can arrest you anytime anywhere. You don’t have the required document on your possession, these document are only to be issue to you from the paying country NIGERIA, to this regards you are advice to contact the EFCC BENIN to obtain the document from them to enable the immediate release of the funds in your name. We have done our verification on your FBI Identification Record with our Social Security Number, the only document left is the required Diplomatic Immunity Seal Of Transfer(DIST) Which should be issue to you from the paying country of the said funds, you are to contact the ECONOMIC AND FINANCIAL CRIME COMMISSION (EFCC) Benin republic to obtain the above required document, find below their contact information’s:

Contact Person: Mrs. CECILIA JONES
Email:( eco_nomicfinancial80-00@admin.in.th )
Office Address: 72 western avenues Victoria Island. Furthermore, be advice that according to the United State Law together with the FBI rules and regulations, you are to obtain the document from the EFCC BENIN where the fund was transfer from. Also Note that you are to take care of the Document to be issued to you right away, because due to the content of the document and how important and secured the document is, You are to take care of the document by sending to the EFCC BENIN the sum of $95 for the issuing of the document right away and your $1.5million will be release to you That is the only way the EFCC BENIN will issue you the document, because they are going to issue you the Authentic and Original copy of the document for the resettlement of your fund.

PAYMENT INFORMATION THROUGH WESTERN UNION
Receivers Name: Idowu Olusegun George.
Country: Benin Republic
City……Cotonou
Code: 00229
Test Question: What Color
Answer : Red
Amount: $95
Senders Name……….
MTCN Numbers…………

You are here by advice to Contact them through the email address above and send the fee to them. Note that you are to do this immediately if you really want your fund to be credited to your personal account and also if you don’t want any action to be fall before you. We have already informed the EFCC BENIN about the present situation, so go ahead and contact them immediately. Your fund is now on our custody and will not be release to you unless the required document is confirmed, after that the fund will be release to you immediately without any delay.

NOTE: We have asked for the above documents to make available the most complete and up-to date records possible for no criminal justice purposes.

WARNING: failure to produce the above requirement in the next 48 hours, legal action will be taken immediately by arresting and detaining you, justification and if found guilty, you will be jailed…… As terrorism, drug trafficking and money laundering is a serious problem in our community today. The F.B.I will not stop at any length in tracking down and prosecuting any criminal who indulge in this criminal act. FORWARD THE DOCUMENT TO US VIA EMAIL ATTACHMENT AS SOON AS YOU OBTAINS IT.

Faithfully Your’s

Robert S.Mueller 111
FBI Director
Email;( fbi_compensation205@yahoo.com.my )
FBI WEB SITE http://www.fbi.gov/
Supreme Court of the United States

E.A. Mc Mahon
President
Air Force Space Operations Association
Please use the earthlink email address.
“Slainte”
Thanks Ed

Return-Path: <eamcmahon@earthlink.net>
X-Originating-IP: [209.86.89.70]
Authentication-Results: mta1198.mail.bf1.yahoo.com
Received: from 127.0.0.1 (EHLO elasmtp-banded.atl.sa.earthlink.net) (209.86.89.70)
by mta1198.mail.bf1.yahoo.com with SMTP; Mon, 17 Jun 2013 12:56:56 -0700 ELNK-Trace:X-Originating-IP;
Received: from [209.86.224.37] (helo=elwamui-karabash.atl.sa.earthlink.net) Elwamui Karabash
by elasmtp-banded.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <eamcmahon@earthlink.net>)
id 1UofXo-0001zW-LS; Mon, 17 Jun 2013 15:56:52 -0400
Received: from 41.85.176.51 by webmail.earthlink.net with HTTP; Mon, 17 Jun 2013 15:56:52 -0400
Message-ID: <31650895.1371499012503.JavaMail.root@elwamui-karabash.atl.sa.earthlink.net>
From: “FBI U.S.A” <eamcmahon@earthlink.net> Eamc Mahon
Reply-To: “FBI U.S.A” <fbi_compensation205@yahoo.com.my>
Subject: FBI HEADQUARTERS IN WASHINGTON, D.C.
X-ELNK-Trace: 176a23236f9e948c85338a7d01cb3b6a7e972de0d01da94054e9797ee04906cacf773d57f8c5428e350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 209.86.224.37
fbi_compensation205@yahoo.com.my eco_nomicfinancial80-00@admin.in.th Economic Financial

$
From: “FBI” <ams@cox.net> Reply-Address: scam_t@aim.com

Get back to us now for all your money that you lost to scammers,reply back to us now for your lost money back
scamd@mail2police.com

Return-Path: ams@cox.net
X-YahooFilteredBulk: 68.230.241.146
Received-SPF: pass (domain of cox.net designates 68.230.241.146 as permitted sender)
X-Originating-IP: [68.230.241.146]
Authentication-Results: mta1291.mail.ne1.yahoo.com from=cox.net; domainkeys=neutral (no sig); from=cox.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO fed1rmfepo201.cox.net) (68.230.241.146) by mta1291.mail.ne1.yahoo.com with SMTP; Wed, 15 May 2013 13:43:50 +0000
Received: from fed1rmimpo210 ([68.230.241.161]) by fed1rmfepo201.cox.net (InterMail vM.8.01.05.09 201-2260-151-124-20120717) with ESMTP id <20130515134350.LGHW8908.fed1rmfepo201.cox.net@fed1rmimpo210> for <porkyexposed@yahoo.com>; Wed, 15 May 2013 09:43:50 -0400
Received: from winbh67 ([64.62.201.17]) by fed1rmimpo210 with cox id cDjR1l00J0P1VFk01DjVfn; Wed, 15 May 2013 09:43:49 -0400
Authentication-Results: cox.net; auth=pass (LOGIN) smtp.auth=bgtyhn67@cox.net
Reply-To: <scam_t@aim.com> scam_t@aim.com
From: “FBI”<ams@cox.net> ams@cox.net
Subject: $

This Nigerian scammer also uses the following names;

Agent Aaron Hotchpotch
pinterpo@yahoo.co.uk
deliverycompanydhlexpress@yahoo.com.my
Mrs. Carolyn Lande <joys83882@earthlink.net>
AirForceSpaceOperationsAssociation@earthlink.net

 
Leave a comment

Posted by on 05/16/2013 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Federal Bureau of Investigation Benin”

NIGERIAN SCAM – FBI IMPOSTER

Email came with attached file.

advance_fee_fraud

Your Approved Funds

From: FEDERAL BUREAU OF INVESTIGATION <0.287file777777777@att.net>
To:
Sent: Wednesday, February 6, 2013 6:59 AM
Subject: Fw: FBI YOUR LEGAL PAYMENT US$8.5M OPEN THE ATTACHMENT

From: FEDERAL BUREAU OF INVESTIGATION [mailto:0.287file777777777@att.net]
Sent: Wednesday, February 06, 2013 9:23 AM
Subject: Fw: FBI YOUR LEGAL PAYMENT US$8.5M OPEN THE ATTACHMENT
From FEDERAL BUREAU OF INVESTIGATION Wed Feb 6 06:59:31 2013
X-Apparently-To: deleted@ymail.com via
Return-Path: <0.287file777777777@att.net>
X-YahooFilteredBulk: 98.139.44.163
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: RTtdbbsWLDuVtMh48dsz030bEUJEk0otAy_NBen.shNxxVpm
.1Q.F7SVQfD5ZkPSQdjWyGrrVAgtJRKHbmBWGqOUtwy7EsP3ZZvrnGzSK9W1
iaJVqOwSwIapSJJL9FVpIba_ltDeEQBAUea.D2s3bW7.ln4KimDAUy7XO7PH
IoQDucSOusPVTTy2bguXnqBrcZrxMe7NU_zNzaJSJlqz.crQbxGRJV16Ki0Y
gS4ShqjoVHs3RmJY1At8Iz4gVcr706Pp3gKLbHI5wT2y.lC1DVRjlnUslzWl
mSmvRQ0iKYB7z_w89b7zBL83RnGq2q7bX1etbWtYmzUtfxkvg1dLNUGBd_h6
tVc.Yfn2YnMg2f2chQS_lQXLFnVUU7YQCSiaB24BJtY5h2KK.WIqLwSbOxJX
E1CkKfPN3KMv0igIX.uXDGhsIovxmZXGyvoIcaixG.g7LNp4vySBZ.tIVpXZ
ugTm.lGsrF35jqd1j48bWbcVur58_e_TJaizZGYSufsM84yRue0R4Jz7E1jZ
1EIS2tRzpUhATek6looMKy9LFS4v_JuQCCpCeQB6F_v26sGwGy3HqU_yfd6t
om_FGWTDU727SXli9WLvaOthJkKjzc9Z8OjorzXFxzQiN1j8SeTPAVnxNXgt
I2ai65toE9D7vu9wuFC_x8inN26uzGgaLoBJIAISvZiqQ23ioUvYie.sNl71
hMoMxCWn2V5XzYq8PW1xnk2jfHABnx2mViiQZzQZEw56jkkRJodVxcNgXcCz
JNd2P3.d7.UvE7i1RvMBrihvCJfcq2NCCbflBGQ4XWQgvODAgr5LQNdcr9l9
TEYLv0OR39dOAGo19ArtBPWK61sXBDMUPBp1aG2kXTA_pwGYR1hnqeJvAEz3
BPiWT7YJjiQYEvr5q6XFHVfgSeEbebHi8fXo2vyGeD_yVrDwzbbge.eSpN4B
DcgcsJao8l.xl1X4gEbSgYcwZoGycA5DovtEG0Dc9njlow2A6fsw53q1NrnZ
2R7wDcVQFel49fx6kZNMMTgYTij4oeHJcDI2tj4M2gt43srXNZcN5Zvlx9T6
3SbqNa.8581f2PozsV74lCaGEkEMI3ADhiFerGKYru5dyf2VOiBtkhH8q98N
BEOLPB4pP5BCQQtuHdhrHkHlpacSfUvIi3RDVM9Dyd_gmHO6LU6CFaMScZg4
iFoRBoa9n2HIEQ5sZ5nW6jQtFzug24w9e0f1Bq6jtfLg6Ti9w4BcLeJdO2.F
hciBZae1QySjLPA.zOp_M3fneVsOOXNu.8Tw1ZaU.hja5_wAIpfyhD8PgcfQ
I4halmxy4GUTod38ew8wquGG8m74MSgl7eVF.ZrBdgZE3I2iDnUfxUUBQHEC
DnXrxKCWyUeswCszStBrgH.b
X-Originating-IP: [98.139.44.163]
Authentication-Results: mta1061.mail.ac4.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm14-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.163)
by mta1061.mail.ac4.yahoo.com with SMTP; Wed, 06 Feb 2013 14:59:36 +0000
Received: from [98.139.44.99] by nm14.access.bullet.mail.sp2.yahoo.com with NNFMP; 06 Feb 2013 14:59:33 -0000
Received: from [98.139.44.78] by tm4.access.bullet.mail.sp2.yahoo.com with NNFMP; 06 Feb 2013 14:59:32 -0000
Received: from [127.0.0.1] by omp1015.access.mail.sp2.yahoo.com with NNFMP; 06 Feb 2013 14:59:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 434289.10003.bm@omp1015.access.mail.sp2.yahoo.com
Received: (qmail 44710 invoked by uid 60001); 6 Feb 2013 14:59:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1360162771; bh=Wk5yCSwojfjITevtlgeqNujZlxpy1zzmIqgroGniwOI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=bpG9S8ljRJ2+RRWR4gJyLu0U+gtzUlNCmF1PxRksdHUrEdHxyVLqRA4URKvhwyUx2k9yyaxrJWHA7M/IqOoCzboXQaw/My+9ijTb5gEU3UWzq2Bfc9hMUNaWsLneZp0dmN0RHF+henR6F7CbHqd85oAG1X9MbV/2JRURT4uiV6Q=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=p/2iZdj3ynSADwsdeQxX4TUA1620O6BEXWqmkLfqbnUop8x5DAxHw/a2lVJMxbEhwoKgPsWfhwT80qCQ8FpjNAK3kyD4bf+Vosg5hMNCDOADRCAZMeCp0b56ghOghu1n1JpZVx95TSviQffib3kTo0O1gBgIhscUtVvW/sOr3fw=;
X-YMail-OSG: qQlKmPYVM1mvg8TbAPuHhPELCds4rmsmsSVZMyFk1Pool6o
PhtBPSUBLfL6UpY04t_qK4jEY0L.j50KBV0msrRJBSa2p2tN7gQOuJFSjd8o
GtmdhbFd1vzjtVF4tJVZHJC7accN9.s4mjV3tq3xgJniRR7ud1QA6YOFvs3u
fvOjq1gRZKObfshcwjabjrltNMamhLyfWUvl1Upf8JxLT.6quOXxEhKeugFR
aT2aQfIq5k6Fzd5JdsFhud6YeayhBIOgJYGkcznQ6gzlg7OEu9gdbeU42Nzt
2WGxWwPit_QkoBETknLUx.C8Jj4fwv.g2HlvCmZhYdQ1RLCHirdZrX_Z1lmA
jXJ7O9woM4egmRTZtaDHZ0FdKqstL3HUT1paZn5.54tpIdfnTyRNXNzVrTkC
eADpEMt8fwCWCGXfsaPrDD9l7EP.XaIr7cK01D0UAllP6.J4DnTtcPmKl1Co
229z5mCMM3P7I5BEvIZ5OPkvjs14EB3D9Nj8I_vlaWiojhefGDjsRPoG.DpO
bHMRwbTWWqX3AvPfL6UYo
Received: from [68.71.76.242] by web184804.mail.gq1.yahoo.com via HTTP; Wed, 06 Feb 2013 06:59:31 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.132.503
Message-ID: <1360162771.18696.YahooMailClassic@web184804.mail.gq1.yahoo.com>
Date: Wed, 6 Feb 2013 06:59:31 -0800 (PST)
From: FEDERAL BUREAU OF INVESTIGATION <0.287file777777777@att.net>
Reply-To: federalgovernmentbenin@superposta.com
Subject: Fw: FBI YOUR LEGAL PAYMENT US$8.5M OPEN THE ATTACHMENT
Content-Type: multipart/mixed; boundary=”-1662700043-1704866853-1360162771=:18696″
0.287file777777777@att.net REPLY_ADDRESS: federalgovernmentbenin@superposta.com RECEIVED_IP: 68.71.76.242 IP_USED: 98.139.44.163

Ip Address 3rd Party Info Provider City Flag Country
* 68.71.76.242 Millennium Telcom Llc Keller United States
98.139.44.78 Yahoo! Sunnyvale United States
98.139.44.99 Yahoo! Sunnyvale United States
98.139.44.163 Yahoo! Sunnyvale United States

 
Leave a comment

Posted by on 02/07/2013 in Other

 

Tags: , , , , , , , , ,

“fbiwashingtondc73@yahoo.com”

RECOVERY SCAM – FBI IMPOSTER – NIGERIAN SCAMMER

These scammers are jokes. For one, I’m sure the FBI wouldn’t need ME to tell them my name. For two, they certainly wouldn’t be using free yahoo email accounts and three, I’ve never been scammed so this email (like similar ones before) are sent to numerous email users and the scammer is hoping for a gullable hit.

scam-alert

Attention: Beneficiary,

This is an official advice from the Federal Bureau of Investigation and it is only for SCAM VICTIMS. It has come to our notice that the Bank of America has a huge amount of money worth $10.5 Million United State Dollars in your name and to be transfer to your account but we the F.B.I need a proper verification document called Diplomatic Immunity Seal Of Transfer (DIST) to prove you are the beneficiary and to start the transfer of your fund to your account.

We have decided to contact you directly to acquire the proper verifications and proof from you to show that you are the rightful person to receive this fund. We want to make sure its a clean and legal money you are about to receive before we can instruct the Bank to transfer your fund to your account. So you are advice to forward us the “Diplomatic Immunity Seal Of Transfer” (DIST), if you have it in your position to verify that the money you are about to receive is legal and legitimate.

Note if you dont have these documents as required, you are advice to contact Mr. Tom Warren, the person in charge in getting your said document called “Diplomatic Immunity Seal of Transfer” (DIST), for your immediate fund transfer to your Personal Bank Account. Also we have confirmed that the amount required to procure your document which is called the Diplomatic Immunity Seal of Transfer (DIST) will cost you a total sum of $1,500USD. You are advice to mail Mr. Tom Warren with his contact information give below and request for the payment information on how you can make the available payment ready via Western Union or Money Gram so he can get your D.I.S.T Document procured by your name, for immediate transfer of your fund to your personal bank account. Contact him with his information’s given below;

Name: Mr. Tom Warren
E-mail: mr.tomwarren@ymail.com
Tel: (509) 588-1725

You should also contact Mr. Tom Warren with the required details regarding the transfer of your fund to your own personal Bank Account and only with the following requirement to get your D.I.S.T Document procured by your name with the information’s needed below;

*Full Name…
*Address…
*City…
*State…
*Zip code…
*Nationality…
*Occupation…
*Telephone…
*Email…
*Sex…
*Age…

WARNING: We have requested for the D.I.S.T Document to make available the most complete and updated records possible for the enhancement of public safety, welfare and security of society while recognizing the importance of individual privacy rights. Failure to produce the above requirement to us, legal action will be taken immediately by arresting and detaining you. You shall be tried and if found guilty, you will be jailed as terrorism, drug trafficking and money laundering is a serious problem in our community today. We the F.B.I will not stop at any length in tracking down and prosecuting any criminal who indulge in this criminal act. You’re advised to keep us posted with the requirement to enable us follow up with the release of your fund transfer immediately to your own personal Bank Account.

Regard,

Federal Bureau Investigation.
Robert S. Mueller III,
FBI, Director.

Return-Path: <upservic@srv1.infseg.cl>
X-YahooFilteredBulk: 200.63.98.22
Received-SPF: none (domain of srv1.infseg.cl does not designate permitted sender hosts)
X-YMailISG: JLjueiwWLDtczw.Cg.rJtL5iqVAtk_aEPD3AQp3BBX.4k.6F p9TNHnZ4_8ylQd7907X0zHvuxfH61vTzJGcNHDarNc9CFPkTh4X3MD1TbmSG 35j.8yT_7DlaA4Ap8FztVCf4NQtdFzVYqFhIb7SC4eegiq4atXpB37w.zF8e anUR_R3kizuoHni0968KnkZhwXmlWjYNBBchFED3w2iIpItW1pP.Y2O0wuhv RuxrgpC8gx7BMm4UzvjL26MP5H6doANpMm50QCqGSbKvrJTMg392MWR2FOS9 8RcrE9XSKPd52HMYBAoFJDetnbOm0xB.sWYA3vegP14lDBnyi7926.Tq.kij FlzDpjSHllzMVrKFSHeZxloGSvVQBCotHWJacDr6BUj7E7HccP1T1rgxJ1kh YTWY2v0zvJ2vMXzhLqdGkYIP5C4.ezFkYMoKzFJUmz.Ybht.rut5WQ22SFLU V43xLHAlIrw6AhMO6iJLZCYJBVYib2TqVGTxR9q5Nttv0gWg3eB7TpLbDUYt Mf92xumiySH8oRZbBRSFjtL4rqoiNf49T8k8lglcbI6tkqeLaCX2An4aSz._ 0tyLhZdk8RbLNwhOgECxtBszxRhVlv2LgEI5ERgBhIMHwxHDUNvPmhCudNUM AH9MnwSUYxaO9e9eUsRDiKuKgDYzSH24wY9LyvN4nZ7eSjstYf0Z047GBOlo mqbAEsXmTBI3h7P4i8CA2gcoWQPHYHD9oYo2teQOeZ.vgt7J2LXw0zQvcOop 7dID4sCi67me1x8DSNR3QXD6O1W5h_km4PdwHq_NsGYQLYCBhavif4b4kjKa 2fKEHV3OEp7j3J5jHYelYEQfFM5qPMffQF5HddA1.kp5WKKLZq.6r49xbn4x 0W7GCuVuZcHrSgK4S2t6sqfEyx38NUkfIiEZ2TXvka72KS1N4lI5nMmcvR0T N9psVfYIsLB6jqNr5vEoCks.dsVhn5nR4Rk6I5ikDTYWT8zWd1a1OxAIgPt4 3s_Xu0lC8h5VcY1lqLBXUMZE62vabrPZOHtacSfVM9jXGyAS7bjthWY34AC8 2IbL8O8zrL2M.DeSBvwdIHnUDIEV_.gx5hwTMcMAJaZtw1fIBSoSGxsV458L rkARwT7553wvYQ_cjRz_4tInTYOyIyryVF5SR0V_KXAtOHSyBSmOnGhg8n2X 5Q.Lml88DEv.kOaj_TK1ig6hQY7WLoJOfDej817i8d7_RS.hQ4gTk_TrJ.Tu tX3bpr_JhC5CaGkIgbfaCiFvqsGh3CPx4f5j6ZAjl5mrMAFF42cfafVBNE0p XTV3BbI0pSKkON.3LCipvTpkndAiinSHAe_pSHaeE26o4c.c
X-Originating-IP: [200.63.98.22]
Authentication-Results: mta1262.mail.sk1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO srv1.infseg.cl) (200.63.98.22) by mta1262.mail.sk1.yahoo.com with SMTP; Thu, 24 Jan 2013 06:07:15 -0800
Received: from upservic by srv1.infseg.cl with local (Exim 4.80) (envelope-from <upservic@srv1.infseg.cl>) id 1TyM5O-0002OD-3C for deleted@yahoo.com; Thu, 24 Jan 2013 09:39:18 -0300
Subject: F.B.I 2013 NOTICE
X-PHP-Script: http://www.upservice.cl/wp-content/themes/picnic/cache/images/error_crime.php for 197.255.175.145
From: <fbiwashingtondc73@yahoo.com>
Reply-To: mr.tomwarren@ymail.com
Message-Id: <E1TyM5O-0002OD-3C@srv1.infseg.cl>
Date: Thu, 24 Jan 2013 09:39:18 -0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – srv1.infseg.cl
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [504 504] / [47 12]
X-AntiAbuse: Sender Address Domain – srv1.infseg.cl
X-Get-Message-Sender-Via: srv1.infseg.cl: authenticated_id: upservic/only user confirmed/virtual account not confirmed

FROM: Tom Warren Thomas Warren fbiwashingtondc73@yahoo.com <fbiwashingtondc73@yahoo.com> mr.tomwarren@ymail.com RETURN-ADDRESS: upservic@srv1.infseg.cl PHONE NUMBER: 509-588-1725 RECEIVED_IP: 197.255.175.145 IP_USED: 200.63.98.22

 
Leave a comment

Posted by on 01/27/2013 in Other

 

Tags: , , , , , , , , , , , ,

“FEDERAL BUREAU OF INVESTIGATION AFRICAN DIVISION”

NIGERIAN SCAM – FBI IMPOSTER – FRAUD

419

NOTE: AN ATTACHED LINK WAS ALSO SENT WITH THIS EMAIL, TITLED “FEDERAL BUREAU OF INVESTIGATION AFRICAN DIVISION”

Message contains attachments1 File (35KB) 
FEDERAL BUREAU OF INVESTIGATION AFRICAN DIVISION.rtf
PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

HEADER DETAILS:

Return-Path: <webxccccx4@att.net>
X-YahooFilteredBulk: 66.94.236.140
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: zzxWd9sWLDuQXSC1RZR6QO4b9JXw3fErq_cQzCr_3CK8OISE 8rPlYaX_TdwN9vgHTzqDgT0TYnS1s102HITQ7GpEBERUIasBEImvBxJRZcHt Sb4qki89Qv3fmKVv6GwLWVqJ7chRB1AbM0mhgSC4TS4Oj3PcJK83fEEmGUQ_ z_P4e90GzDcFa67E7ukY_JtgfhWytOfKoPn4CuAVoRToBOqnLPlhw4Kdho5Y .bJ6UjVu4c2h_VQInuWJn6Pt8ydBGj7GDseMxXP.H9guPuDLaYj.4hpFpHTC LY0aTvI1a2gfZm.6J7rWeUjxXuKS8ZmzDvy5y0wLBON2Vj87WWk48djvN3O. UH_sKRfVCtLFi5KAAbPLLSO6z3o9albHprHXOSU8QrsNi03XxRc1POASTti2 4CzDBBUdut.A3zZK4ZdDVWgrgxTlk7TqOGjS4AySVNiX2NwDU4TwTwYgDk8E Vf4YU_SS6.VJpIPl1MQZ9cXHtphFLCmipCCLv9Rp..FW.3x8tr3O9iS5Y4u8 jf5zT8ekjDiedWnp.gmeVKu8xbghD9ZGj0vpo_wjOwi0a3UwErXfjQ01TEhg ieYJds2pTPVjf3kI58_cyOS0S4NKrBrj_BbRMSiVIS.Har6GKBDwGTIieR4J BCt7O9Ei2nJPNQ9zOoUvWg8j.c0.pXH6YCc1VT7HlJRtJUYh0zb8GOcmSNmo os95De9ZRvEvtAOVzofmVsC1Q0HEbuSMmtq2Wt2xHo80y2ERnxBwqU69egje ID2sLsE9yp5_B3Bs3D0DL1A1U2HUVEodE_X4UTFp5ddBF51CvyTtbgnsrCIH 7JIHhHzsLoZxwN8tmxIjPY3mOEHCTu4Pw8FRkRLoVxD_vhHLLorALqjEkhXa j7AK5JCkcRN8g_xddJSnYIsOq.2r9vKQJ89m37.B9.RYTt26SZshQOQkgYnA KEiNKA_JdQNgCWB1hi.F1Z24RRGNOrdu8VXsu2NYmRndzoZ8hEo0A1RDwXL1 o1BlFR5TOelUr6TSUdZBcQ935ugwVH8w8HXgZRJdZ9nXEOxhnjiHHeFZPfU6 4d1Y0Qi8cIUjtGnpFvnOBS9gXgrN71vCKcQaxgd..Dw9ZdYmdotAlL.H8ajY ptuGB0xgiTwBKGcEV0MyVNcetyiE4Cd94ejKQfs-
X-Originating-IP: [66.94.236.140]
Authentication-Results: mta1025.mail.ac4.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm22-vm1.access.bullet.mail.mud.yahoo.com) (66.94.236.140) by mta1025.mail.ac4.yahoo.com with SMTP; Tue, 15 Jan 2013 06:38:12 -0800
Received: from [66.94.237.201] by nm22.access.bullet.mail.mud.yahoo.com with NNFMP; 15 Jan 2013 14:38:12 -0000
Received: from [66.94.237.118] by tm12.access.bullet.mail.mud.yahoo.com with NNFMP; 15 Jan 2013 14:38:11 -0000
Received: from [127.0.0.1] by omp1023.access.mail.mud.yahoo.com with NNFMP; 15 Jan 2013 14:38:11 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 941997.83283.bm@omp1023.access.mail.mud.yahoo.com
Received: (qmail 64750 invoked by uid 60001); 15 Jan 2013 14:38:11 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1358260691; bh=KD+0Hu1CHKQ3UVOa++eL+HPnf64s7GUcrdvD5tlumq8=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=axY/m1p+zGzLz2vhB3SirnIqNuYTvAeM72KfYFhByDEJt4FtaaK6OCUlUeqMLpqZtB1khbJeqlU27yHXbyH69O6ibMRB1Oqne7JxIXBvkQho0egEvYcd/2WSjRe1pNUHe3y+3IWL1627kuCgUz2eksOzcaGex7gMm8x6t3Mp9tY=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=naFhkt6WEEpdDu7Mmq3iWNzl3BRETUxk7b8VqgQ1tPiAgvLUN1un3L+RQOyEw1SdONKdmiNiFWarU6LWsPmCJY3d7wrfVj5Y8/aDlVTiNITXT/1SwEiagJYq2gLnSFROsSLAJTTTg71Pr7TMfOA081QwgPHv9F4XD2Jw9+je5Dw=;
X-YMail-OSG: ngK6G_0VM1l3RsocqDXSYMfMGfDxHjezzJeFVquje_4O3IA uOZVDWiDraGBML9hgQe6OMp3QZfbZhIl__6OSz.VFO_eil2GH33v9uFaS6ZS a.EoinPA9lfp2RE7qMem9.S0g7zEf_XXHj8Wyd7lCiHD_je.qzO_4XuVmcxn cGODwCnAxOyI6MgQPYlSDxX5XuHFY3sPTAgcAgxYdhDSXFfQJwR0clz2I7Zd pRsgE7KFhyQ0LqLBwCb2IYMzAgrWPu30ug5oa7u444QYuQOvLraFv5.NCj9M P1rPh5tmFRzVmDeT0Vpmyq2FIwFtHRkEuHxclYI9J1gl953bWRwFDFqaeTsc DWik0Qa.E8.NI4E0IjCLhP3.miedn7S7MXpNOWoXfIA03mFTFQhXYLmZ3UvU bb8y8cty.D4B0X6iMoRTHt3uF4hgKgkjr4PKoCmSGYxNV3rIVGX6Bv0BtdQY k.XKdpEzQjjtjxgn7YRHyDXwtdgvmPQXHxQfWBCBKaq0SmCX9RiqJlodMyqC mP51CSZYe
Received: from [12.205.29.196] by web181405.mail.ne1.yahoo.com via HTTP; Tue, 15 Jan 2013 06:38:10 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358260690.55219.YahooMailClassic@web181405.mail.ne1.yahoo.com>
From: FEDERAL BUREAU OF INVESTIGATION AFRICAN DIVISION <webxccccx4@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION

FEDERAL BUREAU OF INVESTIGATION AFRICAN DIVISION webxccccx4@att.net

12.205.29.196 <> 66.94.236.140

 
1 Comment

Posted by on 01/27/2013 in Other

 

Tags: , , , , , , ,

“Agent David Jackson”

NIGERIAN SCAM – FBI IMPOSTER – ADVANCE FEE FRAUD

UPDATE: THIS SCAMMER EMAILED ME AGAIN — BOTH EMAILS ARE IDENICAL BUT WERE SENT UNDER DIFFERENT IP ADDRESSES — I’VE POSTED BOTH HEADER DETAILS BELOW THE EMAILS.

NOTE: AN ATTACHED FILE WAS ALSO SENT WITH THESE EMAILS TITLED “FBI AGENT”

PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY 

HEADER INFORMATION:

Return-Path: <webxcc14@att.net>
X-YahooFilteredBulk: 66.94.236.142
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: xoKjTDIWLDuBkmVXmCPlfbv_WZIjE5wra.dGk.EGLHd0_Ik. pzXPk3w2kzAxCK7MZDCnIjPAHX4nkOLUWkVgvqANtwsS4AgS4bOVG8Lv99o6 3BMAirzElljzLZY4wdsWw9WleH1CZEp5.UMq53jijuMwtIYd7x.ExSbD27Ot r3_dTsJdFRmlrUqFnlFrxRjc4clsrYTx8MHP8xgBArE0aAgckgmkh_NFaXes eFxkLeTk8B2toXNzOIeea16MI2RpMzkNQqVdZlAbQv9U61_3c.oKDxZ4sV.5 gY8pcctoBsIZGG9tOZpijSRxkY_VNxPwzsIyYElyeo1jXVFkDNpuiHONH_U3 ApMQzh.wDU.jhNuXBYpwGIlhfv9oTEq_hUh8LCwDygA8_4mjrCUa0F.lWk.R FtrDdBD3ltOXTwhRO32pjVB1CPDt6LTZ8YdYZkkguJVLCSNZdLESt5PiVvd6 lGX8smgbIpn7foNPQkAZVH9SBLePPnJ0LgJ60bsjU83T4qfyrukgl9KdXub7 MABdwmieVghKVFJMzfloN9dLl3RNh.YOCUdkfqwYsgMbeNtb5H7_eCFoK7OP D7gfZPsFtVjEXCNrOM0LafoFgGhsN8EKmcfG2ezRE4LEMYJCNNTmTHWcR57P jIP1Um.Sqshw1pFjj1DLniKvydPsCH3Ss_G6feYrvRrZQNOYYsMXe7s4p14o d9cxRoG0dZtitQC0n3nLFx4qiuT2TFhofBB.T.t1sPhZQdnHcBuQzEmbw1i1 xoI73b1xEwHowauOTWfTtt9TFec9QoAuR69SdrMYaMquwaBt.7t3JqTeIs3B V2nXriD8bMHx3ZE7uBxrrmHVS1GX7GYQgT.k3k.6tvB.2iG91etu1UizkS0X 9k4tNRukg_JqZO3GaUA4m9_by.IJ2P6ysrjfW5D4Cdk0a40F1JmzcsALitH5 khgOiV_0COJR5YLbv80xYavNu8lx5CcGP2ls_jfPSGGVbec3_kdLutEoMV3b wnZyd3FgAPiF46OlBp6wWlEU4ArRRbe4io1JVzBUJJyEfH19Rn_rSE7QLov8 CCmTFPY0xi4mWBEnBbzqZMBQ.2BgATYUweIU9yCuYLbnrAo10iRptjeTPSHA kthPnAzgcpRZn8pVoo_4jpjojKgxrTHoXjOlKzuAULhX2atdExaU5Sh_gJzC pfBqTBC04EV5r4qQEO12X4W7YTkZMSgisiCHupFcs9RXCE7u4lBAm7jVSZzk H8UZHkKp6JWDlPMGbgmKLnzIKNn.Uv1xksWV28YWO2S.3H_reW8aFmqzUlYo fqpup8uBX7hERv.02iQgBflO9NRe48RUorCY2YsBeBUqEz3UYD_FL8yNVGz7 wfXDZjkeJwjKpvZjlyR62Bcp6CNEaS_VeNV51bbgrMtOyPv95FYzuVIVQnXa J6AQ735T
X-Originating-IP: [66.94.236.142]
Authentication-Results: mta1133.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm23-vm1.access.bullet.mail.mud.yahoo.com) (66.94.236.142) by mta1133.mail.bf1.yahoo.com with SMTP; Fri, 11 Jan 2013 05:00:52 -0800
Received: from [66.94.237.199] by nm23.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
Received: from [98.139.44.93] by tm10.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
Received: from [127.0.0.1] by omp1030.access.mail.sp2.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 296482.1479.bm@omp1030.access.mail.sp2.yahoo.com
Received: (qmail 37215 invoked by uid 60001); 11 Jan 2013 13:00:50 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1357909250; bh=AMv2pcNcaeNlJVqHQriJ4Ri1HfCs/cWs5cs0YO/zIGY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=dOKri5+JYYcxJT9h7uxBXePMdTKL9LgDJaDxXAXuKXkol/FHCkW7VSrnFN/3MjPpf5yDolF9ISRT3voPGp6JR3IPgQ6gQn09IbTLKDTDiZCJtIt6LZ6Nh5IFb/P7xZF91BeaW6wRFYV9bDF79MeUxbR1nBQ9Uxx+tDmuc2EHvuA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=IJMFPznKpHxDIYQ9bzl24Q3XMLcjmLv3vEQCNFIYPov7S/flRvjby7HCwZuoE1DPiKcsiN1BxsM/0aotpqOdM0QTrBTCejq8SrPEheI4TCwU7Ow9eW7VZcnTNDZH4zvHDSWPf1dZ4Lt/aiO8S5x9o4N5yeWcTXUfe7p83oGb8hE=;
X-YMail-OSG: TDmS3ggVM1nfAjpQSEiVdV88KjCqKzlApmBtrsiihrc8lyv SQXEYaC4icuKbPOXdw0EDFm2oJY1QxbTQ9LQNzqiBT8cLE1ctrswApbp5smO UN.d_cYwa7eVA.2gprfdTU5BLUnee57BJB7mmSZ6cdmaK0zaCmqtEjZOFNCy IEjbDJzhAllb4ufC.JkScVlCUEAYHdm47QsJ29uunh.nwHbpwD5Aqc7OZPRd g1HSfA.SpgPudxZKy7x5x9C1zF5i3wRJiGN.hUGxF_orR7J1wxmW6uixQ4Q8 HcuUu9Inx20Xp7X1gWIXpxSKuGG2i5sX2GIEe.jDAXtXKBES6vuBRUc81DV_ WU8Pu2Bzqt5ECCkCZyrlYveBNfRo2anoYH00EU0JO7uvnmLlC82wp9tEtKHK F0IlSIOGPTMvMsscdUYj79v3PD3P2dZ.SuKoSdB.9fq5nJK1xTUKEg6T9jcI 9PgL80ABFGZFlkHIbPNHXy_0Qku6Wbj0YoV79stu043EWcSjVc..30TYjf_G ZyVd1eNlz
Received: from [72.64.146.136] by web185002.mail.gq1.yahoo.com via HTTP; Fri, 11 Jan 2013 05:00:50 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357909250.70203.YahooMailClassic@web185002.mail.gq1.yahoo.com>
Date: Fri, 11 Jan 2013 05:00:50 -0800 (PST)
From: Agent David Jackson <webxcc14@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

Agent David Jackson webxcc14@att.net 72.64.146.136 >< 66.94.236.142 REPLY-ADDRESS: david_jackson141@yahoo.co.jp

___________

FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

Return-Path: <webxcc14@att.net>
X-YahooFilteredBulk: 98.139.44.167
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: jjzWyiIWLDvQAq1bz5qLzCO2.QJuQdBJN6zZ8UglWMf8e7nM 9jdFsjujbwAPbjhWkM9RYr5QgmMx_7ksYyMP7Jjs3XZYq8QJ.JOCflql1Phg uIEC1jKdcia99ibuuIZ1iyTS.YAWVHLQm773M33.9zH3akABbi3OAxcFZdPa _TyUllSVHN5uC3.lOCrpSjlvoHAKplQ8reqYGh_wUeyz8biM7zko0f2p3pdz bZsUy.1wsFHQaiIztozIyIdoXX8_dQr9O0DwjrcYx8_mrsoohQXDmv0Qd0F7 bo.bDYicT6riOqq72kZPXTe5UREAcMQnls_gqnDfYn2tNUkhIP.JFtt3kFOD NQ1lhN3.C2p0oKrVYvZPPwJltKHjidAvCn4Q8ihWax_B3SnFA7QB73pYOvjy mJmU_WrXbJXxa1H3lKu1OYy8eYc5trelPUzNd06xUgb5u.q4lsRv4pEMuhlC 3EIjl6qhXHmCkyjNzL0guKnsS_nNfVyv6IhA_UoAdGURE8PYvSRu.uKVpE5s PuFvknOdTp5VKOqZlPWZRtIwAFiiuFeTyBC7d2LpH8MRTjRMq0LLXjaeDRRf 27t1hfEygTEKI84MjRY31u6pEyJVx_f14A14xGLL2R8a7nBQnoTZ6xqa2PVy ifE_vufn7zejkeijo26POkYD14lPWROAf34bIoR6VvEMzvGGmgldWYKtP6_T OdwC8QgTaGzINGVLw.oBXZ5QLgJjOuRIwZ8ZglAmJKEmuuzzOp4khM4oIbwN Xm0i_P90x5x8kAmH8507dNT2yBBXcT2C0nj_gWggOL8NO9LfVtPUMC_UPviL GfefUvwQgd73k4k8woYRnAC5xVKMX6DZpW1mACwOFYmO3ukpLYaih0AW7ZN2 WGty8iF7Ra1AQp0HRbTxBV1uNd13_qvS8BpSUt0FxtwWBk3zZuJmd8ZdL1EW Mj5JrL8GFK_uz7NU71hIndLApqMh453FEbGnqUXiDVvaIPzku.a1ncAWuacT xHju1mSZQzcrmbN7jHnFzE8inD6aIBDf5BKcN7xa.w.KsGbrgwHT9dyTWCiB U.oXyIM72g4dZkOOe5WYd3MIpUw0a_YM6Lv.X.4CzTJAALD0jm5_ffFE4hzX UIusKF5370W9qtmDSI6cpy59NfzqeNA8T1FVQzuvHCzSV0IbXk4Y7LyOPCOF jYe7w2CWd8xrD2EBt.d5BEAupDSqk9bUSxQsNtDD_eN9Cq9Ka_NEMmnj2y6l FY.ygqon9EjdQ0HJdOB8CSLRsd.OpSSwWu9h0JRBaFxn4gZebvUrtEAWma6B wV6WwPJGCV1rsIa3NaCj2xumef.yT.F73q3WzUWX2qU66IvuMLYSHN5qNLmi 42Ez_5GDASpIpdzYuA_x._xh1oo-
X-Originating-IP: [98.139.44.167]
Authentication-Results: mta1045.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm16-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.167) by mta1045.mail.bf1.yahoo.com with SMTP; Mon, 14 Jan 2013 05:27:27 -0800
Received: from [98.139.44.105] by nm16.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
Received: from [98.139.44.73] by tm10.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
Received: from [127.0.0.1] by omp1010.access.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 252445.15343.bm@omp1010.access.mail.sp2.yahoo.com
Received: (qmail 27093 invoked by uid 60001); 14 Jan 2013 13:27:23 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1358170043; bh=Zm+DJwrwGZlIA/LG24aCrFEpyMJ8dMFzxwrXD14xR1w=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=5ml0Xm3/BrZ7EuPmGpWRgsPNYtHEUNpHsbSSLkkKDgu0u9cI10VSDqgFfoGsE2hrjAML3CC4/aUra7VOYh1GwZZmELiL2PnYvSrBDs508LqoJo0Jk0c40hixsaQO+7NRh0ui3n9wKVixAzfuMuBORXUz4isAM9Uj2r8RRq2OPvo=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=5Cl+v6lPr2mrClM1Tr3uoEcxJGT6po046oHmJqVXsidvAjGm2h818ba09wHtcX4h6be+zslui+s2f0LUbzuCsqrDY9DxKTWX/P0a5jX1HE5fg8cg2gWioTCmUnizj5Hnpk8JXnSQBmXO05ybxFll6OTtEZ8KJfQhTw0INVCPdGE=;
X-YMail-OSG: .au7dWcVM1mjbQkta19wLaNG8g565zmamCIhdNrIz5J4oiR Ei87Eg4zRlKOTdWciw.equT5lByIRZtVJfezeL10GmmrKTYeitYPptLbUICU 3Anf.JK_3NAzOf99bdmAe2djTDVFpgkFD82cg4kjZTZjr5gofpaquzxJRp3i DRy5pvhmKi0SE6TRfn1x7wsGYnfPcKA3cWENK_oBoLL3yv37iM860nmaqUCk ppgmkkgx1JZEmdnTtvjUzzdkfWPoN_LLOJiuKRtHby4bABJGJwhzpQEebrFJ 6GriB_Yhx74xtLzYjZL3gtysoUF0QZN4xJRBYjkGbB_kNsbH_XjgdYxlJFzs WOYEZ0HTWXt2ZO19n_285v1Lpod0jDlJGke15uWv2QkBAdb8npYY0TJpxV0u Gqj4IxurvaVeU0V1zj30cyHHuIeX4sW_mftM7AI3WRXykHTZiLe.e4mZ8PJW 9krGUKD5CM.vs2nGKr0tUFPFhuaZ1B18Mc.me7eflQ2zq.F92sv8c2mNAADB Qbpuzc04-
Received: from [64.72.78.27] by web185001.mail.gq1.yahoo.com via HTTP; Mon, 14 Jan 2013 05:27:23 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358170043.12150.YahooMailClassic@web185001.mail.gq1.yahoo.com>
Date: Mon, 14 Jan 2013 05:27:23 -0800 (PST)
From: Agent David Jackson <webxcc14@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

Agent David Jackson webxcc14@att.net RECEIVED_IP: 64.72.78.27 ORIGINATING: 98.139.44.167

_______

Message contains attachments1 File (36KB)
FEDERAL BUREAU OF INVESTIGATION IN NIGERIA.rtf
PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

Return-Path: <webxccccx4@att.net>
X-YahooFilteredBulk: 98.139.44.169
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 9LjqTrgWLDsWa.HbSNWNBH8jAOpaObL1Edc7fNdmRImcUBZv xZofYsr2bdMW1WQHSWtYRWXFljhG0QgPPk.D7mX2yHJMul_Vd6cPN4lzpqBR QObxIsLNz908K0NbbkGfnPzo77OMUH6cdcV4k3GrPli1vAdxeFm_iNCu4EDE FIohu2_hWwnjV9DF4dxpCK9yrXrnp4W7oLuqKByLsWDTXHH6PuvHUZ9HRRDl InKZ3SeEQJ1Ruj8sAnn2stoWc6z4W3KN2OPEA7a5uUjI5dzAM21Xj1uOGpKn PmSpxJRQPUhDOK6xgSRVwyJxqFSS5akOAejt94XnGPVkOcdxHVZuK0VxXlpb aD1YL2o6EPhq3kXV9S1eje77SfpxGupfC4WxqpyyuWTyI38uHjGGkQoK3992 yz7cogcpQzLdN9xoT9jYkoR9VGRUHMeY36p5xjZai0NB4CrYoNSaeXPCOWz9 4fRkfNe_WL2yLRLLYbyQhCJ0UJvG8yqZL2BE.9kW1SCfI0pt.25Kqw2tZ2Sx H8lRk0x5_GRlZ06JVi1AqY21IHiD5uwSxqPliBBh98MJ.xID7VjJTa9nlnTk HJr8QB5cLaID3qIjqNk1TtKW6GXe.c7lDu3EdhMMFN6V1Eu6h7_HWdUegkgw BLcuC9zufbTkI5Q1A03yx8bbdtfB1PtDR.FkI8LtsxChfPPRp7jP20Ql0Akb 7qAvyLlGfPS.Em8lyeU67O5P2NZR8hhQqnykedIJ2jU7X1rhPpFDhkyyDGQD RhIG3n76WgTWbxraLq337f4HO8U.CZkBxLB4vk4nNGHzwNBy9WkQoi8PaOxy mttNuXtL5PTI9BzPEA57na.7RC4HxDvsk.vrwy2TM9TKoZpvtOlZQN3R11zc 4Sg8aWHhUgbKGr3uLdUDb6YO5bfdhgW_5irq_AFLOV3pF0KgJPKaFVK32Zsv gpdAFBGqKnR4aVtz66hNwydDm8MSTEveB9s36Um1t3KeRpi3r5dzMWbIrMdE h7uhz4Lptww7j34aj5BEjFYZWAFOquX54B5wcukO9m6Uh25R_TmWAywlRYkU R.qQMKfyzIoeOyIH2.3LrhEnVI2eJgi02ubeV07iw0AxahIbojmQgKC_4ykW lA9Et8DKXwa8AtthOC7iTi_u8GVYySxoQXybEeg6YJZy54nVe2S_i3EBEuoX Kglb.lN7Lb8mnxfg2Va1gc5C87kw1Fao1EPlxuW2lFHw7TFBkPztB4gqXZ53 yyZVMfuJNVH0MqwFKzHmlMiOnvSzUAUeaQdPJw7aLMQfmhaw2GAGhai1dXgv mt0.4i7IWKBrgvWMq33efz2j0eP3j__qyRDv1KvA_P8s3mo_km1zL9AxVcJz Ck5iaJSS4FgdahKCBDhjVVOMDzJHUb32fHn._RHdHjVfeVjCdOdqGvaxffXR nh_xZpfMuA–
X-Originating-IP: [98.139.44.169]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm17-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.169) by mta1285.mail.ac4.yahoo.com with SMTP; Wed, 16 Jan 2013 05:46:47 -0800
Received: from [98.139.44.97] by nm17.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:45 -0000
Received: from [98.139.44.66] by tm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:44 -0000
Received: from [127.0.0.1] by omp1003.access.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:44 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 938289.74941.bm@omp1003.access.mail.sp2.yahoo.com
Received: from [216.171.90.22] by web181401.mail.ne1.yahoo.com via HTTP; Wed, 16 Jan 2013 05:46:43 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358344003.16284.YahooMailClassic@web181401.mail.ne1.yahoo.com>
From: AGENT DAVID JACKSON <webxccccx4@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

DAVID JACKSON webxccccx4@att.net REPLY_ADDRESS: david_jackson141@yahoo.co.jp RETURN_PATH: webxccccx4@att.net RECEIVED_IP: 216.171.90.22 IP_USED: 98.139.44.169

FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

 
Leave a comment

Posted by on 01/16/2013 in Other

 

Tags: , , , , , , , , , , , , , , ,

“Mr. Stephen Fred”

LOTTERY SCAM – FBI IMPOSTER – ATM CARD MONEY TRANSFER – FRAUD

CLICK HERE for an earlier post which lists two more emails and headers of Stephen Fred

UPDATED RESPONSE FROM STEPHEN FRED RECEIVED ON 12/27/12 (below) — Also, check all headers, because you’ll notice different IP addresses being used with each email he sends.

12/27/12 EMAIL: Dear Friend

We are writing you to inform you that someone came to our office claiming that he is your Next of Kin and wants to claim your ATM CARD which is in our custody, for he said that you just died of a deadly diseases, we from the Finance House keeping your ATM CARD worth US$3.5 MILLION UNITED STATE DOLLAR can’t just release the ATM CARD to him because we should have received a call from a member of your family or you could have stated this to us since you have failed to pay just the sum of US$180 for the delivery and insurance fee. When he said he wanted to claim your ATM CARD despite your inability to respond back to us and that he was willing to pay the sum of $180USD for the delivery and insurance fee, the Board members were so skeptical about this and has asked me to contact you once again to know if you are still alive and to know if he is trying to steal your money from us.

Do get back to us if you are still there so that we will not foolishly handover your ATM CARD to someone else who claims to be your next of Kin. We will be glad to send you your ATM CARD iF you are still there so that we can arrest this person who says he is from your family.

Your response will make a difference and sort this out. This will be best if you are alive and if you are dead , we want who ever that receives this mail , to have a Rest in peace and we are going to have a change of ownership to the next of Kin.

Regards,
Mr Stephen Fred

_________________________________________________

12/19/12 EMAIL: Dear:

Thanks for emailing us, i pray this email gets to you in good state of mind.

First of all i want you to understand that this email you are about you read is directly from the F.B.I (Federal Bureau of Investigation) Office, so that is why i will appreciate it if you pay attention to what ever in have to say to you.

Am Mr. Stephen Mark the new correspondent delivery officer who is in charge of making sure your funds gets to you right at your door front, and am assuring you that this no scam, this is my profession for the past 25 years.Transferring money to people who are been compensated by the FBI round the world.

If you will like to know! your email address was gotten by the FBI last week after passing out an investigation on a fraudster here in Africa, and your email address was among the emails of those that has been scammed by this heartless fraudster, so after series of meetings has been made with the secretary general of the United Nations Organization and the FBI they have come to a final conclusion to release the sum of$150,000,000,000 MILLION USD to the scammed victims.

The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Good luck Jonathan to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes.Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?
ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $5,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2016. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account.

Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire in next three weeks you will only need to pay $180 instead of $420 saving you $285 So if you pay before the three weeks June 2012 you save $285 Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $180.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 24 hours after the receipt of payment has been confirmed.

You are advised to contact me with the information’s as stated below:

Your full Name..
Your Address:…..
Home/Cell Phone:……..
Preferred Payment Method (ATM / Cashier Check)

I await your immediate reply so as to move ahead with the delivery of your funds to your door front in the next 24 hours.

Best Regards:
Mr Stephen Mark
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

12/19/12 HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
X-YahooFilteredBulk: 77.238.189.196
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts)
X-YMailISG: miz.PSkWLDvm8OHiL48MwW7HgCGZcY9wyYfPB0bWgcwKjEva TQwyGMTEfGBukWTJXp6K3_lMdOr8o3lm7TXrmPoc4SYUT3RVw6rGmRAryrmR vzFdPJ7nWMn8LKQrp74PYAgJV4aKVfzqyjt6AWzoohYTZOMagwlgMOTaPzTw rGipFSZ5Eobv4U_GlaNlE_77Ddk6T98GFT9V.aLJnAc0Ph4j3q6vJfarMtOQ NrJ0NJrxpVmlky589fuZQPic.EkeCD30o7kG6qwUIV44GPS5N2hb9u3CnUKO Idl.D9s3x8My32Vjz8f8SthSPf2bIAF159pdZwtc98SBOvRla.GQlOJ_qc1g BVwFqn5SUVXM9a5hmQj.BXKYJuCZuxSquLjVxtHH1rBh9EGqnA09aSKtoHSH bKbHNSkq6SkKdYfbF6ymr7Xg546oVhvmCv37ZGcxagiSNzoXXOrMTZgeQvdn LUhuKcL3GG1fQFdFazm82hezg0qQk7RdFP5xxpsuNTPgXrIUDMpFXjcjiQX. 56SsbW2xWvtdWS4tKKkLwaoVOEBhN8oFDaAjWHad_O77JiouWVwI9UZVRnsb epl8cLnKbZF6ir3kuH5sRj17HH1TFrTI_Yn0ON8OGQMcql6xsFmzGVuDmNVU 9NzXr3WX4wwnq1eIKU7Rlrf0i4MYsNZGO5VNVHNJ_lscTQGsyOd8Qb5ZQn4T 3GuOsvDM_mbrBpHu79D8ihDJ4z9GyDjWZAWAwent8y9HXlBijC8p9BCkVvz9 7bsWQfsNlFjIjrBa_msrlpK1AcwxQ3thkIw8XJ7ZZg7WO9VyRxTxOOVVzkqe quk8zEmWht_j_AFgtqjtBshl1ZBXWvjnUy7EbyyXzurKVIEFwtDGX8PDfX0i nhenxR8A.Cc4Tx6lAc3WrDHC_nhTnCdkdOu4QoHc2YAhQLsnDHrVNu1A5I8s BdFXnu5qPsLugzcNIIcjqcV3jdGpTvem9lKvB.26V8q9QxjHW6kAc7QhiRCj oTNYV1SlvAJcZuT8K8NAnkkB87v1nGfSSlVMpObPRdAUF85rgPEzQxr.WC4v _lVsNv_bFAENAGxZQEUa5peHi9bk3SUoYl839PLfNH42AWyqw.r.uEDGgYgt YVf3htF6YiWLWvMqeK0vFhXSbGSUeNWQejxn4bLX4hKc7dcNPN2X4lxDHV4Z TtgqG4qSWGI0T31Ja328K7tD0tv.6MoNpwNtC7rR_ZYySGuxBSy65pYmhzn7 fD5hzdiIiAums7aVzssL3et4ky6.RBgIHcG4CxHLGTeA6UnT.gF7oZRWMY8b 4efHUmr2._obPGoTIsNZrbXF0k5iLpTUAKgu_6ZfsR_ayUUr8XC.Y7JvnlGf Qj7GhkHo12CIBoSS2qKhAFSH9vHhX0Xx86FPWuv84Dun4Hw-
X-Originating-IP: [77.238.189.196]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm0.bullet.mail.ird.yahoo.com) (77.238.189.196) by mta1299.mail.sk1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:48:41 -0800
Received: from [77.238.189.232] by nm12.bullet.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
Received: from [212.82.108.126] by tm13.bullet.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
Received: from [127.0.0.1] by omp1035.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 955255.21914.bm@omp1035.mail.ird.yahoo.com
Received: (qmail 872 invoked by uid 60001); 18 Dec 2012 19:48:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1355860117; bh=8wr5+nuRl/ns3gTGRezUcxkLMAwD+/aKdXnRIi6o6TY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=6oJFhfa3p393I0xyrjhWQkUUjMFtdPImK5K243mP8aw2j2Ggo3ikcPl1+eRnjxs7VpIY5Mz0F5DSU0EE/k/BweIBKvdlUq2Lri6CqF4vqu2RlNRlEilW5g8O1z5wLje7bh7lo9Al99Bl2UQ+o+5LRnSqsydSUBCepF1X9HSMiX4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=cxaqwhvwCd3wwPtAVfKDnME1KkqzhntFJbBJXbDovmDNwyaVmX+FfJ2NhERfEIIpGd4n8o4ciZPL7kvjkyGgXsmTH1riWPjOmGcRURgnnscU5QMg64kJTobNnMXFiA8qhYFfLrHWgNE6qkx0mpKBiGQCJ6+MIiFbgBmp2v1SV7s=;
X-YMail-OSG: BjMYFAMVM1mnis_308ZVtMLR8Q8RKjoBERe2MAKplDV68cK RggpmS3_GIfS.MlTnm3NSn4KH2I7R1Pw8szBwplBfRNwRJe8f9qo0KvFmbIa XNyfXRa3a.3CF_.LzUvsypRymwmrvV2iaeh_kvvwQpu6zyZ1XZ6FIsJfkpYg TLvlzNdVM3ET7UUGV.zw8Qp8J.Toaem6Caq3aLMS.eA.BQfMs0UJTlPt6wUd mQRAWgRagh1QXMK1QVys_1Xj1NJ.bhuSPOXPhUTRSuN37VSXzysseRAnOvEq v9pWabsobdmSltAtLZbMm2NBz9OQMCID1e8Prxaa.vZQLIckB8OdFabnmGqG cPs.6D04GXE_gwrx2SRP3lTHI2TZFEOmJKHiPu0fRVZ0Iwyo0drq_UXofLZi CeWryBPYEBpAIZSPRIVnfB_TfD74keU.3FCnK.xFQiVraI7XdRsQxC9ffPg- -
Received: from [87.248.115.210] by web171905.mail.ir2.yahoo.com via HTTP; Tue, 18 Dec 2012 19:48:37 GMT
X-Mailer: YahooMailWebService/0.8.129.483
References: <E1Tkafo-0004nX-Uf@dmghost.dmg-hosting.com.ar> <1355817424.21167.YahooMailClassic@web161003.mail.bf1.yahoo.com>
Message-ID: <1355860117.783.YahooMailNeo@web171905.mail.ir2.yahoo.com>
Date: Tue, 18 Dec 2012 19:48:37 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Reply-To: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
In-Reply-To: <1355817424.21167.YahooMailClassic@web161003.mail.bf1.yahoo.com>

“Mr. Stephen Fred” <mr.stephenfred@yahoo.dk> 87.248.115.210 – 77.238.189.196  mr.stephenfred@yahoo.dk Stephen Fred also sends out scam mail under: vikhadd068@aol.com - albanesi@dmghost.dmg-hosting.com.ar - 64.12.227.42 – 172.29.96.160 – 172.29.104.4 - 200.58.125.17

_____________________________________-

12/27/12 HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts) bSB5b3UgdGhhdCBzb21lb25lIGNhbWUgdG8gb3VyIG9mZmljZSBjbGFpbWlu ZyB0aGF0IGhlIGlzIHlvdXIgTmV4dCBvZiBLaW4gYW5kIHdhbnRzIHRvIGNs YWltIHlvdXIgQVRNIENBUkQgd2hpY2ggaXMgaW4gb3VyIGN1c3RvZHksIGZv ciBoZSBzYWlkIHRoYXQgeW91IGp1c3QgZGllZCBvZiBhIGRlYWRseSBkaXNl YXNlcywgd2UgZnJvbSB0aGUgRmluYW5jZSBIb3VzZSBrZWVwaQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzk-
X-YMailISG: L0eJ1l0WLDsrmzhsNc4ma_ZTXhvmHQ2AKw1S.hbjK7f0cFYW 9CyYcBU7kl_AGjll0mshaAP10b6HHWwmyr9NHIlVfiz7naOArbwf87HAw5k3 9ZezwwxiQSn4Lh.0FELX.Gv7N9cLWGfm7FzsbwAHegFAuQ0MKWAVoejRLT4h Mva1W4NkDaUXxkm7lo6wQpYGPnrh1K29QdN7hMvxGaW3l828rdEa8u7R8tSF P4hN0LiGmfNFwx6QzZuEf6A2NwhmTwMxG9LGWort8xV0_dR.OhnQJhmjuBsc 9oIinp2hK1fR6VBZJthF5_gO2Ec_LX4HyhlnJbJtts4p8lgQTMe7REbczek3 JiKVpW7iC3Dl0cJmqyvbbaKQv_d6aYyCdG44SAiKQgTmIL6Q7kOxmbX5E9oX VHkWJ_n0X.iXcwGRTEKSP3N9Db.XTjTantv3oyhi4UKKjHCgO9L3K48vqx.y lykB.B__.iVEcJGgz2YelmZhbBJNrlsIo7PxJEUxWEzxTZXrAZwV5WM1ED12 7in.6D0uDbboS5zNAKWDInTs4lGmB48ZR_SPDK_.8iJUyJcPBLptswWDIfVy SG3KXeDQEq_gRLrZJQu.GvdtTETqw6J9MoijRpq50_OqvaiigEPjEVGea1.i 2NV5sTGYsiQuUkTJ0EwtBLKGaOcnFciopJ6uqRPA06N_bjwNg6bwirsb0.Pw TyM8CwA3kUeNU0ZAsAcZzlcdl56wTn12drIQyW0n7OP7S0lSvMdiuaGC_j4a NxJSv42fKw4LYMQO5OIPzV78fRppt9C0BSUplNoqZVt8Izbpi88gTHeIPbBd Zyb2SDqGMH9jiwZ5bWrrFCbgYSwl3tQfxosaZFrdf0OIQo901XDPItNnBGln b1o9tF_x8WLFMysnHJKkFaC0Duf0SBaJm4aHuia8YORRHroLa5yXpeLS6y59 WEFMio5sBul0wafKisJEVvqNHjXqzbAzfaehELW1CGdGkLU24xPfHgSA8vxA eqXvjzr7To3C8EkjD5lUYc3NBvtTlqALkVn68dQdQsag6x7JLFNcdac7JGMv oNECu157ZIvAfMtLBOV0OvC9nLIefLT0g_J8jUItQ32lvNCyl.D_2YSwpccJ AcP9rORLXX_lWEayqQq_5nrNbRCCqVtfXVRUQQYwP1bRTvXisvVzpPt1c73S 3bqDK_hTagtrLh9ePwchtdyyMd6EzPV4QOu3aFqkRTm57XswMGOlt7oqZhqk wio.Ss9vFlZffudcNSzbJyVIkseXhkuln9rOZe0MJ14LXV3wBx49OW5XVvPX AIb6lHsnsSEfOQ_EyOiYrvmr6M.zA9MjVNS6ciGoAjDICt35c..p9yBcEx3C IJWyVUBwpr9ahbKgag9UyARGPO52F2gQuE1UmZTpda31lkajMG.ABKRPfA9O 75Kr9w–
X-Originating-IP: [77.238.189.68]
Authentication-Results: mta1014.mail.ac4.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ird.yahoo.com) (77.238.189.68) by mta1014.mail.ac4.yahoo.com with SMTP; Thu, 27 Dec 2012 14:37:06 -0800
Received: from [77.238.189.230] by nm15.bullet.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
Received: from [212.82.108.112] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
Received: from [127.0.0.1] by omp1021.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 965884.6310.bm@omp1021.mail.ird.yahoo.com
Received: (qmail 43155 invoked by uid 60001); 27 Dec 2012 22:37:03 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1356647823; bh=1SbVX8ahIFjSZR3xschcHhVMo6cKx+s+O0qsgJDfn88=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=ku28W2L4rzibEW8KJtxQ8GYY3RM9A2ysRyCDI2Gln9rf6xXk1lWOnKtbTMIIJazEsPbkuoYGbW5QhPyb8stsKii95Pitv0qXFms/i/j3yu6f20ZJk1yqJYZFu8o4FHUd/rIZOrSxXgO0hP0Tv0Z0ohOWTbhm6KDmDemVNqUgwOE=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=SwE6kjNZXtdDz4oisXUvfUkWuvKIwQMtTjCPaUvGZX1g+a1kloixYRBnYnLpM10PHrqlXbp5P0n/Q2fnRYk8ADDaUInNU0wJw5TF7LxaejP592OppJq8wF4GzljgrEKqR4d/FwgPUcycDjnS/pJ9NWMfoCNj1KQaXv0nnjMn3aE=;
X-YMail-OSG: a7CZw8EVM1nb9WgP6LjiWSeVEjNQvjeH9d6HH4HQwVNgho2 Yo454QVEoYdNFuzr.uK.l3dR3Cv.Dsa8amnGZAj6ylZn9ciNvp.JGiOuMA7O kMzUr2COJi5oHfEhJxsNrnx3l67pCUj0kES.IcUPALk66ryXMPiPelATHZjW jheZwLOczwYgem_oZGZkyfJwUyo54l8hkyLUvt4BJ.Linr5MnYn80kleDkbf x72B5ccMKFq.hc4SMdXR1tjKas2_SlDVr4gflKAbKC8PZy7gtgYi_QCSTJSn sbBawKc1HjL.YEEtHJ8tbpi6gNjrqAgc7lPL3QeJctjTZR6G.3FH3TOPgPFn DUQovSsYQbJDEiEZXrLOScPlRVX_gjEW.73r5k7Mwt8RS1Bh6fZB1JvsxGd_ 7D9fNBLRoecCPHV6kyertDGeUXXUPI4ScTmPDrLXwFuzNM5uGL8t3Osvfrw- -
Received: from [41.138.184.157] by web171905.mail.ir2.yahoo.com via HTTP; Thu, 27 Dec 2012 22:37:03 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356647823.42332.YahooMailClassic@web171905.mail.ir2.yahoo.com>
Date: Thu, 27 Dec 2012 22:37:03 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: SEASONS GREETINGS——-PLEASE GET BACK TO US IMMEDIATELY!
Content-Type: multipart/alternative; boundary=”1200650283-1721883567-1356647823=:42332″

41.138.184.157 >< 77.238.189.68

 
Leave a comment

Posted by on 12/19/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , ,

 
Follow

Get every new post delivered to your Inbox.

Join 63 other followers

%d bloggers like this: